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Abstract 



In this paper, we define and study quantum cyclic codes, a generalisation of cyclic codes to 
^ , the quantum setting. Previously studied examples of quantum cyclic codes were all quantum 

codes obtained from classical cyclic codes via the CSS construction. However, the codes that we 
^^' , study are much more general. In particular, we construct cyclic stabiliser codes with parameters 

[[5, 1,3]], [[17, 1, 7]] and [[17, 9, 3]], all of which are not CSS. The [[5, 1, 3]] code is the well known 
Laflamme code and to the best of our knowledge the other two are new examples. Our definition 
f"*) ' of cyclicity applies to non-stabiliser codes as well; in fact we show that the ((5, 6, 2)) nonstabiliser 

(^ I first constructed by Rains ei al [10] and latter by Arvind et al [2] is cyclic. 

We also study stabiliser codes of length 4™ + 1 over F2 for which we define a notation of 
BCH distance. Much like the Berlekamp decoding algorithm for classical BCH codes, we give 
efficient quantum algorithms to correct up to [^y^J errors when the BCH distance is d. 



1 Introduction 

One of the biggest challenge in implementation of quantum computation is to deal with quantum 
errors efficiently. The subtle nature of quantum phenomenon like entanglement and superposition 
needs to be preserved from both the environment as well as from faulty circuits, for any of the 
speedups to be realised. Quantum error correcting codes provide a way to make this this possible. 
Despite strange phenomenons like the no-cloning theorem, a sufficiently detailed theory of quantum 
error correcting exists[8, 7, 4]. It has already provided a foundation for fault-tolerant quantum com- 
puting via the implementation of error resistant quantum circuits and quantum storage elements. 
Besides it plays an important role in various areas like quantum cryptography and quantum key 
distribution protocols. 

In this paper, we study a certain class of quantum codes which we believe is a natural general- 
isation of the class of cyclic code in the classical setting. We give complete characterisation such 
codes and study the stabiliser case in depth (Section 3). Previously, Calderbank et a/[4. Section 5] 



had constructed quantum stabiliser codes whose underlying totally isotropic set (see Section 2 for 
a definition) is cyclic. In the literature, there has been work [9, 1] in trying to use classical cyclic 
codes to build efficient quantum codes via the CSS construction [6, 12]. As concrete examples we 
construct a [[5, 1, 3]], a [[17, 1, 7]] and a [[17, 9, 3]] quantum cyclic code none of which are CSS. The 
5 qubit code is the well known Laflamme code and to the best of our knowledge the other are new. 
Besides we give some examples of nonstabiliser cyclic codes as well (Section 5). 

We also study a restricted family of cyclic stabiliser codes for which we can define a notion of 
BCH distance. Much like the classical case these family of code have efficient (polynomial time) 
quantum decoding algorithm within the BCH limit, i.e. if the BCH distance is d = 2t + 1 then we 
can correct up to t errors. 

2 Preliminaries 

We now give a brief overview of the notation used in this paper. For a prime power q = p^, ¥q 
denotes the unique finite field of cardinality q. In this paper, we study quantum codes over the 
alphabet ¥p. Most of what we say carry over any extension ¥ k as well. 

We consider the p-dimensional Hilbert space Ti = C'^{¥p) of all functions from ¥p to the set 
of complex numbers C. This Hilbert space plays the role of the alphabet set in the quantum 
setting. The set {|a)|a G ¥p} where \a) stands for the function that takes value 1 at a and 
every where else, forms an orthonormal basis for the Hilbert space Ti. For a positive integer n, an 
element a = (ai, . . . ,an)'^ G F" will be considered as column vectors. As is standard in quantum 
computing, by |a) we mean the vector \ai) . . . f^ \an)- Thus, the set {|a)|a G F"} forms a basis 
for the n-fold tensor product Ti^ . 

Quantum errors are captured by what are know as the Weyl operators. For a and b in ¥p define 
the unitary operators Ua and Vb as Ua\x) = \x + a) and Vb\x) = (^^\x), where C is a primitive p-th 
root of unity. The operator Ua is thought of as a flip in the alphabet ¥p and V5 is thought of as a flip 
in the phase. The operator UaVh constitutes a flip in both the alphabet and phase. It is sufficient to 
consider only the Weyl operators when designing quantum codes as they form a basis of the Hilbert 
space B{T-L) of operators from % on to itself. To extend these operators onto Ti.® , for a positive 
integer n, define for a and b in F" the Weyl operators fa and Vb on ^® as ta|x) = |x + a) and 

Vb|x) = C ''l^^) respectively. To capture errors at t locations, we define the joint weight w(a, b) 
for a pair a = (oi, . . . , a„) and b = (61, ... , 6„) in F" as the number of positions i such that either 
Oj or bi is not zero. We extend this definition to Weyl operators, the weight w (L'aVb) is the joint 
weight w (a, b). Consider the transmission of any pure state \'4)) in %® . Occurrence of a quantum 
error at t positions is modelled as the channel applying an unknown Weyl operator UaVh of weight 
t on the transmitted message \ip). An quantum code over Fp of length n is a subspace of the n-fold 
tensor produce H^ . There is by now a significant literature on quantum codes [8, 7, 4]. A quantum 
code, being a subspace, is completely captured by the projection into it. Therefore we often express 
a quantum code by giving its projection operator. A quantum code of length n, dimension K and 
distance d over C'^{¥p) will be called an {{n,K,d))p quantum code. 

We now discuss special quantum codes called stabiliser codes or additive codes. To this end fix 
a finite field Fp and a positive integer n. Let Wn,p denote the group of unitary operators generated 
by the Weyl operators. The error group £n,p is just the group }Vn,p, if the characteristic p is odd, 
and is the group generated by }Vn,p U iWn,p, i being the complex number \/—l, when p is 2. We 
will drop the subscripts n and p when the quantities are clear from the context. For a subset S of 
the error group £, the stabiliser code Cs associated with S is the subspace of vectors \(p) G Ti"^ 
such that U\f) = \f) for all U in S. Without loss of generality we can assume that S is actually a 



subgroup of 8. Furthermore, for the code Cs to be be nontrivial, S should be Abehan and should 
not contain ojl for any nontrivial root of unity a; [5, 3]. We call such a subgroup S a Gottesman 
subgroups of the error group £. 

Consider a pair (a, b) of elements of F" as elements of the vector space Fp" over the scalars 
¥p. The symplectic inner product between two elements u = (a, b) and v = (c, d) of F^" is 
defined as (u, v) = a"'"d — b"'"c. A subset S of F^" is called totally isotropic [4] with respect to the 
symplectic inner product, if for any two elements u and v of S, (u, v) = 0. In the rest of the paper, 
unless otherwise mentioned, by totally isotropic set we mean totally isotropic with respect to the 
symplectic inner product define above. 

Stabiliser codes, or equivalently their corresponding Gottesmann subgroups, are intimately 
connected to totally isotropic subspace of Fp". Depending on whether the characteristic p is odd 
or 2, the exact nature of the correspondence is slightly different. Calderbank et al [5, 4] were the 
first to study this connection when characteristic of the underlying field Fp is 2. Later Arvind and 
Parthasarathy[3] studied the case when p is an odd prime. We summaries these results in a form 
convenient for our purposes. 

Theorem 2.1 ([5, 3]). Let p be any prime and n a positive integer. If S is a totally isotropic 
subspace of F^" there exists n x 2n matrices L and M such that 

1. L'^M is symmetric, 

2. S is the image of the map (J)l,m from F^ to F^" defined as (pL^Mi^) = (Lsl, Ma) and 

3. The set of operators S = {oigfJiaVMa]^ G F"} forms a Gottesman subgroup where a^ is 
defined as 

where C, is a primitive p-th root of unity and i is \/— T. 
^. The projection operator to the associated code Cs is given by 

U&S a 

When studying stabiliser codes, we will concentrate only on the underlying totally isotropic 
subspace of F^". 

One possible way of constructing quantum codes, or totally isotropic subspaces of F" x F" is by 
taking classical codes Ci and C2 of length n such that Ci is orthogonal to C2 (here the orthogonaity 
is with respect to the usual inner product a"''b). It is easy to verify then that Ci x C2 is isotropic. 
This construction is called the CSS construction [6] and the resultant quantum stabiliser codes are 
called CSS codes. 

Let 5 be a subspace of F^". By the centraliser of S, denoted by S, we mean the subspace of 
all u in Fp", such that (u, v) = 0, for all v in S. If S is totally isotropic, S contains S. We have 
the following theorem on the properties of the stabiliser code Cs associated to the set S. 

Theorem 2.2 ([5, 3]). Let S be a totally isotropic subspace of ¥p^^ and let C be the associated 
stabiliser code. Then, the dimension the subspace S is always less than n. If S has dimension 
n — k for some positive integer k then dimension of its centraliser S, as a subspace o/F^", and 
the dimension of the code C, as a Hilbert space, are n + k and p respectively. Furthermore, if the 
minimum weight min{w (u) |u G S* \ S"} is d then C can detect upto d — 1 errors and correct up to 



Let C be a stabiliser code associated with an n — k dimensional totally isotropic subspace S 
of Fp". By the stabiliser dimension of C we mean the integer k. Similarly, we call the weight 
min{w (u) |u G 5 \ S*} the distance of C. A stabiliser code of length n, stabiliser dimension k and 
distance d will be called an [[n, k, d]]p stabiliser code. By theorem 2.2, an [[n, k, d]]p stabiliser code 
is an {[n,p^,d))p quantum code. As usual we will drop the subscript p when it is clear from the 
context. 

3 Quantum Cyclic codes 

In this section we define quantum cyclic codes and study some of its properties. Recall that a 
classical code over ¥p is cyclic if and only if for all code words u = {ui, . . . ,Un), its right shift 
{un,ui, . . . ,Un-i) is also a code word. Let N denote the right shift operator over F" i.e. the 
operator that maps u = {ui, . . . , Un) to (m„, ^^i, • • • , Un-i)- Consider the unitary operator M defined 
on the tensor product "H® as follows M\u) = |A^u). 

Definition 3.1. A quantum code C is defined to be cyclic if the shift operator M maps C to itself, 
i.e. MC = C. 

We have the following result on the projection operator associated to a quantum cyclic code. 

Proposition 3.2. A quantum code C is cyclic if and only if its projection operator commutes with 

M. 

Proof. Let % be any Hilbert space and let C be any subspace with the associated projection operator 
being P. Let U be any unitary operator on%. If UP = PU then UC = UPTi = PUTi. However, 
since Ti is the underlying Hilbert space we have UTi = %. Thus UC = C. 

Conversely, suppose that UC = C. We prove UP = PU by showing that for all \ip) in 7i, 
UP\ip) = PU\ip). Let C be the orthogonal complement of C. Since any unitary map preserves 
inner product, we have UC-^ = C^. 

Any vector \'il>) can be expressed uniquely as |V'i) + |V'2) where iV'i) G C and |^2) G C^. Therefore, 

up\^) = f/|^i) = p([/i^i) + u\^2)) = pum. 

Thus if UC = C then UP = PU. The result then follows by taking U = M. 

a 

Let 5 be a subspace of Fp x F^ . We say that S is separately cyclic if for all (a, b) in S (iVa, Nh) 
is also in S. We have the following property on centralisers of separately cyclic sets. 

Proposition 3.3. Let S be any separately cyclic set then its centraliser is also separately cyclic. 

In the context of cyclic stabiliser codes, separately cyclic sets are interesting because of the 
following property. 

Proposition 3.4. A stabiliser code C is cyclic if and only if its associated totally isotropic subspace 
S and its centraliser S are separately cyclic. 

Proof. Let S be the totally isotropic set associated with C. Let P denote the projector to C. Then 
C is cyclic if and only if N"^ PM = P. 

We make use of Theorem 2.1 for the proof. The projector P is given by the expression P = 
Ea "aC^LaVMa and S is {(La, Ma)|a G F^'} for L, M and a as in Theorem 2.1. Since M'^U^V^ = 



C/jVaVivb) it is necessary that S is separately cyclic. Otherwise the support of M^PM will not match 
with that of P. 

Conversely, if S is separately cyclic then we have (NLa, NMa) G S for all a G F" where L and 
M are as in Theorem 2.1. Also note that the inverse of the shift operation N is just iV^. There 
fore L'^N'^NM = L^M. Hence the scalars a^ are also preserved and hence M^PM = P. 

The cyclicity of the centraliser S follows from Proposition 3.3. 

D 

Classical cyclic codes over ¥p of length n, n coprime to p, are ideals of the polynomial ring 
¥p[X]/{X^ — 1). The goal of the rest of the section is to develop an algebraic characterisation of 
cyclic stabiliser codes along similar lines. We fix some conventions for the rest of the paper. Fix 
a prime p and a positive integer n coprime to p. Let TZ denote the cyclotomic ring ¥p[X]/X^ — 1 
of polynomials modulo X" — 1. For the vector a = (oq, • • • , On-i) in F" associate the polynomials 
a{X) = ao + . . . + a„_iX"~^ in the ring TZ. Often, we need to interchange between these two 
perspectives of an element in F" When we think of them as a vector, we use the bold face Latin 
letter. On the other hand, when thinking of them as polynomials we use the corresponding plain 
face letter. For example the polynomial associated with the vector a is either written as a{X) or 
often just a. In the ring TZ, the polynomial X has a multiplicative inverse namely X^~^. Often, 
we just write X~^ or just ^ to denote this inverse. 

First we have the following characterisation of separately cyclic subspaces of F" x F" in terms 
of polynomials in TZ. 

Lemma 3.5. A subspace S o/ F" x F" is separately cyclic if and only if there exists degree n — 
1 polynomials g{X), f{X) and h{X) in ¥p[X] such that g{X) and h{X) are factors of X'"" — 
1 as polynomials in ¥p[X] and elements of S as a pair of polynomials in TZ x TZ are precisely 
{a{X)g{X),a{X)f{X) + b{X)h{X)) where a{X) and b{X) vary over all degree n — 1 polynomials 

in¥p[X]. 

Proof. Consider any subspace S* of F" x F" . Clearly if there exists polynomials satisfying the above 
mentioned conditions, then S is separately cyclic. 

To prove the converse, assume that S is separately cyclic. Define A and B to be the projections of 
S onto the first and last n coordinates respectively, i.e. A = {a|(a, b) G S} and B = {b|(a, b) G S}. 
Since S is separately cyclic, A and B are cyclic subspaces of F" and hence are ideals of the ring 
TZ. Let g{X) be the factor of X" — 1 that generates A. Since g{X) is an element of A there exists 
a polynomial f{X) in TZ such that (g, f ) G S. Fix any such polynomial /. To construct h{X), 
consider the set Bq = {6(x)|(0, b) G S}. Clearly Bq is also cyclic and therefore and ideal of the 
ring TZ. Let h{X) denote the factor of X" — 1 that generates Bq. Our claim is that these are the 
required polynomials. 

Since S is separately cyclic we have {X^ g{X) , X^ f {X)) are all elements of S. As S* is a subspace, 
by taking appropriate linear combinations, we have that for any two degree n — 1 polynomials a{X) 
and b{X), (ag,af + bh) is an element of S. On the other hand, consider any arbitrary {u,v) G S. 
Clearly u is an element of A and hence u{X) = a(X)g(X). Subtract from the {u,v) the element 
{ag,af) G S. We have {0,v — af) is in S and hence v — af is in Bq. Therefore v — af = bh for 
some polynomial b. 

D 

The triple of polynomials (g, f, h) play a crucial role in unravelling the structure of a separately 
cyclic subspace S. We have the following definition. 



Definition 3.6 (Generating triple). Let S he a separately cyclic subspace o/F" x F" ^ generating 
triple for S is a triple of polynomials {g,f,h) in Vp[X] the polynomials pairs {g,f) and (0, /i) are 
in S and every element of S as a polynomial pair in TZ x TZ is of the form (ag, af + bh) for some 
polynomials a{X) and b{X) in ¥p[X]. 

We want to express the isotropic condition a^d = b^c in terms of polynomials. The following 
definition on pairs of polynomials over Fp that will play the role of the isotropic condition in the 
setting of separately cyclic subspace. 

Definition 3.7 (Isotropic pairs of polynomial). Let a{X), b{X), c{X) and d{X) are polynomials 
in ¥p[X]. We say that the pairs {a,b) and {c,d) are isotropic pairs of polynomial modulo X" — 1 
for some n coprime to p if and only if 

a{X)d{X-'^) = b{X)c{X-'^) mod X" - 1. 

Notice that for any two vectors u and v in F" if u{X) and v{X) denote the corresponding 
polynomials in TZ, then the coefficient of X in the product u{X)v{X^^) mod X" — 1 is the inner 
product u^N^\r, where A^ is the right shift operator. An immediate consequence of this observation 
is the following. 

Proposition 3.8. Let S be a separately cyclic subspace of¥p x F^. An element (u,v) is isotropic 
to all elements of S with respect to the symplectic inner product if and only if the corresponding 
pair of polynomials {u,v) is isotropic modulo X^ — 1 with all polynomial pairs {a,b) in S . 

As a corollary we have the following proposition 

Corollary 3.9. A separately cyclic subset S o/F" x F" is totally isotropic if and only if for every 
pair of elements (a, b) and (c, d) of S, the corresponding polynomials (a, b) and (c, d) are isotropic 
modulo X" — 1. Furthermore, the centraliser S is the pair of all polynomials (c, d) that are isotropic 
to all pairs of polynomials in S. 

We are now ready to characterise all cyclic stabiliser codes. It is sufficient to characterise 
separately cyclic, totally isotropic subsets of F^ x F^. 

Theorem 3.10. A subspace S o/ F" x F" is totally isotropic and separately cyclic if and only if 
there exists polynomials g, f and h in ¥p[X] such that 

1. The polynomials g and h divide AT" — 1 as polynomials over Fp. 

2. g{X-^)h{X) = g{X)h{X~^) = mod X" - I, 

3. The pair {g, f) is isotropic to itself modulo X" — 1, i.e. g{X)f{X^^) = f(X)g{X^^). 

4. S is precisely the set of polynomial pairs of the form {ag,af + bh) where a and b varies over 
polynomials over Fp. 

Proof. Assume that S is both separately cyclic and totally isotropic. Let {g, f, h) be the triple 
generating S. Since S is totally isotropic and since (5, /) is an element of S, it should be isotropic 
modulo X" — 1 with every polynomial pair in S. In particular it should be so with itself and the 
element (0, h). The shows that g, f and h satisfies the conditions in the theorem. 

To prove the converse, assume that polynomials g, f and h exists with the above mentioned 
properties. Then clearly S is separately cyclic. It is straight forward to then check that any two 
elements {oig, aif + ftj/i), for i = 1,2 form a isotropic pair of polynomials modulo X" — 1. Hence 
S is isotropic. D 

6 



A similar proof together with corollary 3.9 gives the following characterisation of the centraliser 
of a separately cyclic totally isotropic subspace. 

Theorem 3.11. Let S he a totally isotropic, separately cyclic subspace o/F" x F" generated by the 
triple {g, f, h) then the centraliser S is the set of all polynomial pairs (c, d) such that 

1. c{X)h{X-^) = c{X-^)h{X) = mod X" - I, 

2. {g,f) and (c, d) forms a isotropic pairs of polynomials, i.e g{X)d{X^^) = f{X)c{X^^) 
mod X"- - 1. 

4 Explicit constructions and decoding algorithm 

In this section we give an explicit constructions of cyclic stabiliser codes over the binary alphabet 
F2. We define the notion of a BCH distance for such codes and give an efficient algorithm to decode 
such codes within the BCH limit. 

Consider the unique quadratic extension F4 = F2(?7) of F2 obtain by adjoining a root rj of the 
irreducible polynomial X'^ + X + 1 in F2[X]. The conjugate root 77 + 1 of X'^ + X + 1 in F4 will 
we denoted by r]' . For this section, we identify the set F2 x F2 with the vector space F4 over F4 as 
follows: every pair of element (a, b) where a and b are vectors in F2 will be identified with vector 
a + 77b in F4. It is convenient to extend this identification to polynomials as well. As before, let 
TZ denote the cyclotomic ring F2[X]/X" — 1. We identify the set TZ x TZ with the cyclotomic ring 
TZ{ri) = ¥4^[X]/X^ — 1 over the field extension F4 by identifying the pair {a,b) of polynomials in 
TZ xTZ with the polynomial a{X) + r]h{X) G TZ{r]). The codes that we give in this section will in 
fact be linear stabiliser codes [4] defined as follows. 

Definition 4.1 (Linear stabiliser codes). A stabiliser code is said to be linear if the underlying 
totally isotropic subspace S o/F" x F" as a subset of ¥2 is a ¥4^-linear subspace 0/F4. 

We first show the following result on separately cyclic subspaces of that are F4 linear. 

Proposition 4.2. Let n be any positive odd integer. Let S be any separately cyclic subspace of 
¥2 X Fg. Then S is ¥4 linear if and only if S is an ideal of¥4[X]/X"- - 1. 

Proof. Clearly S is separately cyclic if and only if S is cyclic as in a classical cyclic code over F4. 
The result then follows from the theory of classical cyclic codes. D 

As a corollary we have the following result 

Corollary 4.3. Let C be any linear stabiliser code and let S be the underlying totally isotropic set. 
Then C is cyclic if and only if S and its centraliser S are ideals of¥4^[X]/X^ — 1. 

Thus constructing linear stabiliser codes that are also cyclic involves computing factors of AT" — 1 
over F4 such that the underlying ideal as a set of Fg x Fg is totally isotropic. To this end we fix 
some more notation. 

Consider the Forbenius automorphism a on F4 that maps the root rj its conjugate r]' = rj + 1. 
We extend this to the ring F4[X]/X" - 1 by defined by a {a{X) + r/6(X)) = a{X) + r/'6(X). We 
first state the following result on the irreducible factors of X^ ^-"^ — 1 over the finite fields F2 and 
F4 respectively. 

Lemma 4.4. Let f{X) be any irreducible factor of X^ '^^ — X over ¥2. 



1. A root P of X^ — 1 is a root of f{X) if and only if /3 is also a root. 

2. Furthermore if f{X) ^ X — 1, the degree of f{X) is an even number 2t and it splits into two 
irreducible factors fi{X,7]) and f2{X,r]) of degree t each such that /2 = o'(/i)- 

Proof. Let f{X) be any irreducible factor of X^ +^ — 1 over F2. Consider any root /3 of f{X). 

To prove Property 1, note that a^™" is a field automorphism and cj^™'(/3) = /J^"" = /3~^. Hence 
/(/3-I) = a2™(/(/3)) = 0. 

Now consider Property 2. Consider any root /? of f{X). Since f{X) / X — 1, we have /3 / 1 
and hence /3 7^ /?~^- As a result, that roots of f{X) conies in pairs; for every root j3 its inverse I3~^ 
is also a root. Hence, f{X) has to be of even degree. 

Let the degree of / be the even number 2f then the splitting field of f{X) over F2 is is ¥^1 
and therefore contains F4. Furthermore any irreducible factor fi{X) of f{X) over F4 has degree 
exactly the degree of the extension F4t/F4 which is t. Since o" is a field automorphism of F4, we 
have f{X) = f\{X)a{f\{X)) over F4. D 

The following theorem gives us a generic way of constructing linear cyclic codes over F2 of 
length 4™ + 1. 

Theorem 4.5. Let n = 4™ + 1 and let g{X) be any factor of X^ — 1 over F2. Let h{X,ri) be any 
product of irreducible factors of X^ — 1/g over F4, such that for any irreducible factor r{X, rf) of 
X"" — 1 over ¥4^, r{X,ri) divides h{X,ri) if and only if a{r) = r{X,r]') does not. Then there is a 
linear stabiliser code whose underlying totally isotropic set S is the ideal generated by g{X)h{X,rj) 
in TZ{ri) and hence is cyclic. Furthermore, the centerliser S of S is the ideal generated by h{X,rj). 

Proof. Let the polynomials be as in the theorem. Clearly the ideal S generated by g{X)h{X, 77) is 
separately cyclic. All that remains is to show that S is isotropic. Consider the ring F4[X]/X" — 1. 
Define via Chinese remaindering an element a{X) such that a{X) = mod g and for all irreducible 
factor r{X,ri) 

f] mod r{X,rj) li r{X,rj) \ h{X,rj), 



\ T]' mod r{X,r]) iir{X,r]) \ h{X,r]), 

We first show that a{X) is a polynomial over F2[X] instead of F4[X]. To prove this consider 
the action of the Frobenius a on TZ{rj) defined by a{u{X,ri)) = u{X,r]'). It is sufficient to show 
that cr(a) = a. Consider any irreducible factor r of X" — 1 over F4. Since h{X,rj) contains in it 
exactly one of the factors r or cj(r), let us assume, without loss of generality, that r \ h{X,ri) and 
a modulo r and a{r) are rj and rj' respectively. Therefore cr{a) modulo a{r) and cr^(r) = r are rj' 
and rj modulo respectively. Therefore a = cr{a) mod ra{r) for every irreducible factor of X" — 1/g 
Furthermore since a = mod g, we have o"(a) = a over TZ{rj). 

It is easy to verify that the ideal S" as a separately cyclic set is generated by the triple {g, ag, 0). 
By Theorem 3.10, S is isotropic if and only if the equation 

g{X)g{X-')a{X) = g{X)g{X-')a{X-l). (1) 

holds modulo X" — 1. By Chinese remaindering it is sufficient to verify Equation 1 modulo g and 
X" — 1/(7 separately. 

Clearly Equation 1 holds modulo g. Since g{X) is a product of irreducible factors of X" — 1 
over F2, for any root /? of X" — 1, we have g{/3~^) = if and only if g{l3) = (Lemma 4.4). 
By both g{X) and g{X^^) are invertible modulo X" — 1/g. Therefore we need to show that 
a(X^^) = a{X) modulo X" — 1/g. It follows from the construction of a(X) that it satisfies the 



equation a^ = a + 1 mod X"' — 1/g. Therefore a{X ^) ^ a(X)^™ = a{X) + 2m modulo X"- — 1/g 
and hence a{X^^) = a{X) mod X^ — 1/g as 2m = in characteristic 2. 

D 

We call the codes that are characterised by the above theorem as 4™ + 1-codes and the pair of 
polynomials {g{X), h{X, rf) the generating pair of the code. We have the following theorem on the 
dimension of the code. 

Theorem 4.6. Let C 6e 4™ + 1-code generated by the pair {g,h) then the stabiliser dimension is 
given by deg{g). 

Proof. The set S is an ideal of F4[X]/X" — 1. Let di and d2 denote the degree of g and h respectively 
then clearly #5 is 4''-(d-i+d2) ^ Also note that gha{h) = X" - 1. Therefore di + 2^2 = n. 

If k is the F2 dimension of S then ^S = 2 . Comparing we have k = 2n — 2d2 — 2d2- Thus we 
have k = n — di. Therefore by 2.2 we have the required result. D 

We now recall some concepts from the theory of classical cyclic codes. 

Definition 4.7 (BCH distance). Let g{X) be a factor of the polynomial X^ — 1 over the finite field 
¥q for some prime power q and let n coprime to q. The BCH distance is the largest integer d such 
that the consecutive distinct powers J3\j5^~^^, . . . ^/3'+'^~2 qj-^ roots of g, for some primitive n-th root 

(3. 

For a 4™ + 1-code generated by the pair (g, h), by the BCH distance we mean the BCH distance 
of h(X,ri) as a factor of X" — 1 over F4. We have the following theorem about the distance. 

Theorem 4.8. The distance of a 4™" + 1 code is at least its BCH distance. 

Proof. The centraliser S of the underlying totally isotropic subspace S is an ideal generated by 
h{X,r]) and hence can be thought of as classical cyclic code over F4. Hence the F4-weight of any 
non-zero element in S is at least the BCH distance. As the distance of the code is the the minimum 
weight of 5" \ S" (Theorem 2.2), we have the desired result. D 

To demonstrate the construction for specific cases take m = 1. The polynomial X^ — 1 = 
{X — 1){X^ + X"^ + X^ + X + 1) over F2. Further, over F4, the degree 4 irreducible factor factorises 
into (X^ + riX + 1) and (X^ + rj'X + 1). If we pick g = X — 1 and h{X, rf) to be any one of the 
factors, we get a [[5, 1,3]] code which turns out to be the Laflamme code. 

The case m = 2 is more interesting. The polynomial X^^ — 1 factorises into three factors. 

x^^ - 1 = (x + l)(x® + x^ + x^ + x^ + x^ + x + l){x^ + x^ + x^ + x^ + 1). 

We have two possibilities for g{X) here. In one case ^(X) = X — 1 and in the other is X — 1 times 
one of the degree 8 factors. By choosing /i(X, rf) appropriately in these cases we get a [[17, 1, 7]] and 
a [[17, 9, 1]] code respectively. We skip the details for lack of space. To the best of our knowledge, 
these are new codes. 

4.1 Decoding 4™ + 1-codes within the BCH limit 

Let C be 4™ + 1-code with BCH distance d = 2t + 1. Much like in the classical case, we show that 
there is an efficient quantum algorithm to correct any quantum error of weight at most t. Here by 
efficient we mean polynomial in the code length n = 4™" + 1. There are two key algorithms that 
we use: (1) The quantum phase finding algorithm and (2) The Berlekamp decoding algorithm for 
classical BCH codes. 

The decoding algorithm for classical BCH code can be seen as follows: 
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Theorem 4.9 (Berlekamp). Let g{X) he a factor of X" — 1 of BCH distance d = 2t + 1 over a 
finite field ¥q, q and n coprime. Let e{X) be any polynomial of weight at most t over ¥p. Given a 
polynomial r{X) = e{X) mod g{X), there is a polynomial time algorithm to recover e{X). 

Proof sketch. Since r{X) = e{X) mod g{X) we have r{X) = e{X) + c{X) for some c{X) in the 
ideal generated by g{X). Note that c{X) is a valid, but as of now unknown, code word in the 
code generated by giX). We can think of the computational task of recovering e{X) as that task 
of recovering the sent message c{X) for a received message r{X) for which there is an efficient 
algorithm due to Berlekamp [13, p-98,6.7]. D 

For the rest of the section fix a 4™ + 1-code C with BCH distance d = 2t + 1. Let n = 
4™ + 1 denote its length and assume that {g,h) is a generating pair for C. Assume that we have 
transmitted a quantum message \ip) £ C over the quantum channel and received the corrupted state 
1^) = UaYblip), where the vectors a and b are unknown to us. If we can design an algorithm that 
recovers a and b without actually disturbing \ijj), then we have an error correction algorithm as we 
recover the sent message by applying the inverse map V^t^I on |^). We show that this is possible 
provided the joint weight w (a, b) < t. 

Consider the polynomial e(X, r/) = a{X^^) + rjb(X^^) as a polynomial over F4[X]/X"' — 1. 
Clearly, the F4-weight of e{X,ri) is also at most t and polynomials a{X), b{X) can be recovered 
once e{X,r]) is recovered. We prove that e{X,rf) can be recovered modulo h{X,ri). 

Let S be the underlying totally isotropic set associated with C. Since {g,h) is the generating 
pair for S, the factor g{X)h{X, rj) of X"^ — 1 generates S as an ideal of W^lXj/X"^ — 1. We have the 
following proposition 

Proposition 4.10. For any (c,d) in S, there is an efficient quantum algorithm to compute the 
polynomial d{X)a{X-^ - c{X)b{X-'^). 

Proof. Recall that the code C is the set of vectors stabilised by the corresponding Gottesman 
subgroup S. Let U = C^c^d be the element in S corresponding to the pair (c, d) G S. It can be 
easily show that \ip) is an eigen vector of U with eigen value (—1) '^"^ and using phase finding 
one can recover the inner product (—1) '^~'^ ■ Repeating the algorithm with [N c,N d), all the 
inner products d iV a — c A^ b can be recovered. Since these are precisely the coefficients the 
polynomial d{X)a{X^^ — c{X)b{X^^) modulo A" — 1, this is sufficient to prove the claim. D 

Since g = gh generate the set S as an ideal, both g and rjg belong to S. Using the algorithm 
in Proposition 4.10 with g and r]g, it is straight forward but tedious to show that the polynomial 
e{X, rj) can be computed modulo h{X, rj). We are now in the setting of Theorem 4.9 where h{X, rj) 
as a polynomial in F4[X]/X"' — 1 playing the role of the generator polynomial. Since h{X,rj) has 
BCH distance 2t + 1, we can recover e(X, rf) and hence (a, b) using the Berlekamp algorithm. Thus 
we have the following theorem 

Theorem 4.11. Let C 6e a 4™ + 1 code of length n = 4™ + 1 and BCH distance d = 2t + l. There 
is quantum algorithm that takes time polynomial in n to correct errors of weight at most t. 

5 Cyclic codes that are not stabiliser 

In this section we give examples for certain nonstabiliser codes that are cyclic. There has been 
some work in the construction of nonstabiliser quantum code. Rains et al [10] used computer 
search to construct the first example of a ((5,6,2)) quantum code which is not stabiliser. Shortly, 
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Roychowdhury and Vatan [11] gave few more examples of such codes. Arvind et al [2] gave a 
generic method to construct quantum codes for Gottesman subgroups of the error group, some of 
which turn out to be nonstabiliser. We summarise their result in the following proposition. 

Proposition 5.1 ([2]). Let S be a Gottesman subgroup of the error group. Then 

1. For any character x of S, the set S^ = {x{s)s\s G 5} is also a Gottesman subgroup of the 
error group with P^ = ^^g^^xi^)^ ^^ the corresponding stabiliser code. 

2. The codes P^ and P^ are orthogonal unless x = '■P- 

3. An element A in the algebra C[5] is a projection if and only if there is a subset B of characters 
of S such that A = YI^^b ^x- 

We call the codes thus generated from Gottesman subgroups, pseudo- stabiliser codes. In par- 
ticular, Arvind et al [2] have show that the ((5,6,2)) code of Rains et al [10] is a pseudo-stabiliser 
code. 

Consider any Gottesman subgroup S that is separately cyclic. Then the corresponding stabiliser 
code C is cyclic. For any character x of 5, 5^^ is also separately cyclic as the underlying totally 
isotropic subspace S of F^" is same for S and S^. Hence the corresponding stabiliser code C^ is 
cyclic and therefore J\f^ P^M = P^. By Proposition 5.1, any pseudo-stabiliser code with support in 
S is given by the sum of projections Pb = S-^gb ^x- Thus we have M^Pb-^ = Pb- As a result we 
have the following proposition. 

Proposition 5.2. A pseudo-stabiliser code whose underlying Gottesman subgroup is cyclic is also 
cyclic. 

The above proposition gives us ways to construct cyclic pseudo-stabiliser code by first con- 
structing a cyclic stabiliser code. In particular, the ((5,6,2)) code is a pseudo-stabiliser code 
whose underlying Gottesman subgroup is separately cyclic. This gives a concrete example for a 
nonstabiliser cyclic quantum code. 

References 

[1] S. Aly, A. Klappenecker, and P. Sarvepalli. Primitive quantum bch codes over finite fields. In 
IEEE International Symposium on Information Theory, 2006, pages 1114-1118, July 2006. 

[2] V. Arvind, P. P. Kurur, and K. R. Parthasarathy Non-stabilizer quantum codes from abelian 
subgroups of the error group. Quantum Information, Statistics and Probability, pages 1-29, 
2004. Dedicates to Alexander S. Holevo on the occasion of his 60th birthday. 

[3] V. Arvind and K. R. Parthasarathy. A family of stabilizer codes based on Weyl commutation 
relation over a finite field. Volume in honor of C.S. Seshadri's 70th birthday, pages 133-153, 
2003. Preprint quant-ph/0206174. 

[4] Calderbank, Rains, Shor, and Sloane. Quantum Error Correction Via Codes Over GF(4). 
lEEETIT: IEEE Transactions on Information Theory, 44, 1998. 

[5] A. R. Calderbank, E. M. Rains, P. W. Shor, and N. J. A. Sloane. Quantum error correction 
and orthogonal geometry. Physical Review Letters, 78(3):405-408, January 1997. 



11 



[6] A. R. Calderbank and P. W. Shor. Good quantum error-correcting codes exist. Physical Review 
Letters A, 54:1098-1105, 1996. 

[7] D. Gottesnian. A class of quantum error-correcting codes saturating the quantum hamming 
bound. Physical Review A, 54:1862-1868, 1996. 

[8] E. Knill and R. Laflamme. A theory of quantum error correcting codes. Physical Review 
letters, 84:2525-2528, 2000. Preprint quant-ph/9604034. 

[9] Z. Ma, X. Li, K. Feng, and D. Feng. On non-binary quantum bch codes. In Theory and 
Applications of Models of Computation, volume 3959 of Lecture Notes in Computer Sciences, 
pages 675-683. Springer, May 2006. 

[10] E. M. Rains, R. H. Hardin, P. W. Shore, and A. S. N.J. A nonadditive quantum code. Physical 
Review Letters, 79:169-183, 1997. 

[11] V. P. Roychowdhury and F. Vatan. On the existence of nonadditive quantum codes. In 
Quantum Computing and Quantum Communications, volume 1509/1999 of Lecture Notes in 
Computer Science, pages 325-336. Springer Berlin / Heidelberg, 1999. 

[12] A. M. Steane. Multiple particle interference and quantum error correction. Proceedings of the 
Royal Society A, 452:2551-77, 1996. 

[13] J. H. van Lint. Introduction to Coding Theory, volume 86 of Graduate Texts in Mathematics. 
Springer- Verlag, New York Inc, 3'' edition, 1998. 



12 



